The new vulnerability, CVE-2025-27915, is a cross-site scripting (XSS) vulnerability in the classic web client of the Zimbra Collaboration Suite, thanks to insufficient sanitisation of HTML content in ...